@nextsparkjs/theme-default 0.1.0-beta.20 → 0.1.0-beta.21

package/tests/cypress/e2e/uat/entities/posts/public.cy.ts

@@ -0,0 +1,249 @@
+/// <reference types="cypress" />
+
+/**
+ * Public Post Display - UAT Tests
+ *
+ * Tests for public post rendering at /blog/[slug].
+ * Validates post display, blocks rendering, categories, and SEO.
+ *
+ * Tags: @uat, @feat-posts, @public, @regression
+ */
+
+import * as allure from 'allure-cypress'
+import { PublicPostPOM } from '../../../../src'
+
+describe('Public Post Display - UAT', {
+  tags: ['@uat', '@feat-posts', '@public', '@regression']
+}, () => {
+  beforeEach(() => {
+    allure.epic('Posts System')
+    allure.feature('Public Post Display')
+  })
+
+  // ============================================================
+  // Post Rendering Tests
+  // ============================================================
+  describe('Post Rendering', () => {
+    it('POST-PUB-001: Should render a published post', { tags: '@smoke' }, () => {
+      allure.story('Post Rendering')
+      allure.severity('critical')
+
+      // Visit a sample post (from sample data: 'welcome-to-our-blog')
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+      PublicPostPOM.assertPostVisible()
+
+      cy.log('Published post rendered successfully')
+    })
+
+    it('POST-PUB-002: Should display post header', () => {
+      allure.story('Post Rendering')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      PublicPostPOM.assertHeaderVisible()
+      PublicPostPOM.assertTitle('Welcome')
+
+      cy.log('Post header displayed')
+    })
+
+    it('POST-PUB-003: Should display post excerpt', () => {
+      allure.story('Post Rendering')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check that excerpt is visible
+      cy.get(PublicPostPOM.postSelectors.excerpt).should('be.visible')
+
+      cy.log('Post excerpt displayed')
+    })
+  })
+
+  // ============================================================
+  // Block Rendering Tests
+  // ============================================================
+  describe('Block Rendering', () => {
+    it('POST-PUB-004: Should render post blocks', () => {
+      allure.story('Block Rendering')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Sample posts have hero blocks - check that blocks are rendered
+      cy.get(PublicPostPOM.postSelectors.content).within(() => {
+        // Look for block content (hero block typically has heading and text)
+        cy.get('h1, h2, h3').should('exist')
+      })
+
+      cy.log('Post blocks rendered')
+    })
+
+    it('POST-PUB-005: Should render hero block correctly', () => {
+      allure.story('Block Rendering')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Hero block should render with its content
+      cy.get(PublicPostPOM.postSelectors.content).within(() => {
+        // Hero typically has heading, description, and CTA
+        cy.contains('Welcome', { matchCase: false }).should('exist')
+      })
+
+      cy.log('Hero block rendered correctly')
+    })
+  })
+
+  // ============================================================
+  // Category Display Tests
+  // ============================================================
+  describe('Category Display', () => {
+    it('POST-PUB-006: Should display category badges', () => {
+      allure.story('Categories')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Sample post has "News" category
+      PublicPostPOM.assertCategoryVisible('News')
+
+      cy.log('Category badges displayed')
+    })
+
+    it('POST-PUB-007: Should display category badges with colors', () => {
+      allure.story('Categories')
+      allure.severity('minor')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check that categories have color styling
+      cy.get(PublicPostPOM.postSelectors.categoriesDisplay).within(() => {
+        cy.get('[style*="background"], [style*="color"]').should('exist')
+      })
+
+      cy.log('Category badges with colors displayed')
+    })
+  })
+
+  // ============================================================
+  // SEO Tests
+  // ============================================================
+  describe('SEO Meta Tags', () => {
+    // SEO meta tags implementation pending
+    it.skip('POST-PUB-008: Should have correct page title', () => {
+      allure.story('SEO')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check that page title includes post title
+      PublicPostPOM.assertMetaTitle('Welcome')
+
+      cy.log('SEO title correct')
+    })
+
+    // SEO meta tags implementation pending
+    it.skip('POST-PUB-009: Should have meta description', () => {
+      allure.story('SEO')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check for meta description
+      cy.get('head meta[name="description"]').should('exist')
+
+      cy.log('Meta description exists')
+    })
+
+    // SEO meta tags implementation pending
+    it.skip('POST-PUB-010: Should have OG tags for social sharing', () => {
+      allure.story('SEO')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check for Open Graph tags
+      cy.get('head meta[property^="og:"]').should('have.length.at.least', 1)
+
+      cy.log('OG tags present')
+    })
+  })
+
+  // ============================================================
+  // Unpublished Post Tests
+  // ============================================================
+  describe('Unpublished Posts', () => {
+    it('POST-PUB-011: Should not display unpublished posts', () => {
+      allure.story('Access Control')
+      allure.severity('critical')
+
+      // Sample data has 'typescript-best-practices' as draft
+      PublicPostPOM.visit('typescript-best-practices', { failOnStatusCode: false })
+
+      // Wait for page to render then check for 404 content
+      cy.get('body', { timeout: 10000 }).should('be.visible').then(($body) => {
+        // Either URL changed to 404 or page shows error/not found content
+        const bodyText = $body.text().toLowerCase()
+        const hasNotFound = bodyText.includes('404') || bodyText.includes('not found') || bodyText.includes('page not found')
+        expect(hasNotFound).to.be.true
+      })
+
+      cy.log('Unpublished post not accessible')
+    })
+  })
+
+  // ============================================================
+  // 404 Tests
+  // ============================================================
+  describe('404 Not Found', () => {
+    it('POST-PUB-012: Should show 404 for non-existent post', () => {
+      allure.story('Error Handling')
+      allure.severity('normal')
+
+      PublicPostPOM.visit('non-existent-post-slug-12345', { failOnStatusCode: false })
+
+      // Wait for page to render then check for 404 content
+      cy.get('body', { timeout: 10000 }).should('be.visible').then(($body) => {
+        const bodyText = $body.text().toLowerCase()
+        const hasNotFound = bodyText.includes('404') || bodyText.includes('not found') || bodyText.includes('page not found')
+        expect(hasNotFound).to.be.true
+      })
+
+      cy.log('404 shown for non-existent post')
+    })
+  })
+
+  // ============================================================
+  // Featured Image Tests
+  // ============================================================
+  describe('Featured Image', () => {
+    it('POST-PUB-013: Should display featured image when present', () => {
+      allure.story('Media')
+      allure.severity('minor')
+
+      PublicPostPOM.visit('welcome-to-our-blog')
+      PublicPostPOM.waitForPostLoad()
+
+      // Check if featured image is present (may or may not be in sample data)
+      cy.get(PublicPostPOM.postSelectors.header).then(($header) => {
+        if ($header.find(PublicPostPOM.postSelectors.featuredImage).length > 0) {
+          PublicPostPOM.assertFeaturedImageVisible()
+          cy.log('Featured image displayed')
+        } else {
+          cy.log('No featured image in this post (optional field)')
+        }
+      })
+    })
+  })
+})

package/tests/cypress/e2e/uat/entities/tasks/member.bdd.md

@@ -0,0 +1,222 @@
+---
+feature: Tasks Management - Member Role
+priority: high
+tags: [tasks, member, permissions, crud-limited]
+grepTags: [uat, feat-tasks, role-member, security]
+coverage: 5
+---
+
+# Tasks Management - Member Role (Limited Access - No Delete)
+
+> Test suite for Member role task permissions. Members can create, read, and update tasks but CANNOT delete them. These tests verify proper CRUD restrictions for the Member role.
+
+## Background
+
+```gherkin:en
+Given I am logged in as Member (member@nextspark.dev)
+And I have navigated to the Tasks dashboard
+And the tasks list has loaded successfully
+```
+
+```gherkin:es
+Given estoy logueado como Member (member@nextspark.dev)
+And he navegado al dashboard de Tareas
+And la lista de tareas ha cargado exitosamente
+```
+
+---
+
+## @test MEMBER-TASK-CREATE-001: Member can create tasks
+
+### Metadata
+- **Priority:** High
+- **Type:** Regression
+- **Tags:** create, form, permissions
+
+```gherkin:en
+Scenario: Member creates a new task
+
+Given I am logged in as a Member
+And I am on the Tasks list page
+When I click the "Add" button
+Then the task creation form should appear
+
+When I enter "Member's New Task" in the Title field
+And I enter "Created by team member" in the Description
+And I click the "Save" button
+Then the form should submit successfully
+And I should see the task in the list
+```
+
+```gherkin:es
+Scenario: Member crea una nueva tarea
+
+Given estoy logueado como Member
+And estoy en la pagina de lista de Tareas
+When hago clic en el boton "Agregar"
+Then deberia aparecer el formulario de creacion
+
+When ingreso "Nueva Tarea del Member" en el campo Titulo
+And ingreso "Creado por miembro del equipo" en Descripcion
+And hago clic en el boton "Guardar"
+Then el formulario deberia enviarse exitosamente
+And deberia ver la tarea en la lista
+```
+
+### Expected Results
+- Add button is visible and clickable for Members
+- Task creation form opens correctly
+- Form submission creates new task
+- New task appears in the list
+
+---
+
+## @test MEMBER-TASK-READ-001: Member can view all tasks
+
+### Metadata
+- **Priority:** High
+- **Type:** Smoke
+- **Tags:** read, list, permissions
+- **Grep:** `@smoke`
+
+```gherkin:en
+Scenario: Member can see the tasks table
+
+Given I am logged in as a Member
+When I navigate to the Tasks dashboard
+Then I should see the tasks table
+And I should see all team tasks (not just my own)
+```
+
+```gherkin:es
+Scenario: Member puede ver la tabla de tareas
+
+Given estoy logueado como Member
+When navego al dashboard de Tareas
+Then deberia ver la tabla de tareas
+And deberia ver todas las tareas del equipo (no solo las mias)
+```
+
+### Expected Results
+- Tasks dashboard is accessible
+- Tasks table displays correctly
+- All team tasks are visible (not just own tasks)
+- Read access is granted to all tasks
+
+---
+
+## @test MEMBER-TASK-READ-002: Member can view task details
+
+### Metadata
+- **Priority:** High
+- **Type:** Regression
+- **Tags:** read, details, navigation
+
+```gherkin:en
+Scenario: Member can access task detail page
+
+Given I am logged in as a Member
+And I have created a task called "Member Test Task"
+When I click on that task in the list
+Then I should be navigated to the task detail page
+And I should see the task title "Member Test Task"
+And I should see the task description
+```
+
+```gherkin:es
+Scenario: Member puede acceder a pagina de detalle
+
+Given estoy logueado como Member
+And he creado una tarea llamada "Tarea de Prueba Member"
+When hago clic en esa tarea en la lista
+Then deberia ser navegado a la pagina de detalle
+And deberia ver el titulo "Tarea de Prueba Member"
+And deberia ver la descripcion de la tarea
+```
+
+### Expected Results
+- Task rows are clickable
+- Detail page navigation works
+- Task title displays correctly
+- Task description is visible
+
+---
+
+## @test MEMBER-TASK-UPDATE-001: Member can edit tasks
+
+### Metadata
+- **Priority:** High
+- **Type:** Regression
+- **Tags:** update, edit, form
+
+```gherkin:en
+Scenario: Member can modify task information
+
+Given I am logged in as a Member
+And I have created a task called "Original Title"
+When I click the "Edit" button on that task
+Then the edit form should appear
+
+When I change the Title to "Original Title - Updated"
+And I click the "Save" button
+Then the changes should be saved
+And I should see "Original Title - Updated" in the list
+```
+
+```gherkin:es
+Scenario: Member puede modificar informacion de tarea
+
+Given estoy logueado como Member
+And he creado una tarea llamada "Titulo Original"
+When hago clic en el boton "Editar" de esa tarea
+Then deberia aparecer el formulario de edicion
+
+When cambio el Titulo a "Titulo Original - Actualizado"
+And hago clic en el boton "Guardar"
+Then los cambios deberian guardarse
+And deberia ver "Titulo Original - Actualizado" en la lista
+```
+
+### Expected Results
+- Edit button is visible for Members
+- Edit form opens with pre-filled data
+- Changes can be saved successfully
+- Updated data reflects in the list
+
+---
+
+## @test MEMBER-TASK-DELETE-001: Delete button is hidden
+
+### Metadata
+- **Priority:** Critical
+- **Type:** Smoke
+- **Tags:** delete, security, hidden-button
+- **Grep:** `@critical` `@security`
+
+```gherkin:en
+Scenario: Delete functionality is hidden from Member role
+
+Given I am logged in as a Member
+And there is at least one task in the list
+When I click on a task to view its details
+Then I should see the task information
+But I should NOT see a "Delete" button
+And there should be no way for me to delete the task
+```
+
+```gherkin:es
+Scenario: Funcionalidad de eliminar oculta para rol Member
+
+Given estoy logueado como Member
+And existe al menos una tarea en la lista
+When hago clic en una tarea para ver sus detalles
+Then deberia ver la informacion de la tarea
+But NO deberia ver un boton "Eliminar"
+And no deberia haber forma de eliminar la tarea
+```
+
+### Expected Results
+- Task information is visible
+- Delete button is completely hidden (not just disabled)
+- Delete button does not exist in DOM
+- Security: No way to delete tasks as Member role

package/tests/cypress/e2e/uat/entities/tasks/member.cy.ts

@@ -0,0 +1,165 @@
+/// <reference types="cypress" />
+
+import * as allure from 'allure-cypress'
+
+import { TasksPOM } from '../../../../src/entities/TasksPOM'
+import { loginAsDefaultMember } from '../../../../src/session-helpers'
+
+describe('Tasks CRUD - Member Role (Create, Read, Update - No Delete)', {
+  tags: ['@uat', '@feat-tasks', '@crud', '@role-member', '@regression']
+}, () => {
+  const tasks = TasksPOM.create()
+  let createdTaskTitles: string[] = []
+
+  beforeEach(() => {
+    allure.epic('UAT')
+    allure.feature('Tasks')
+    allure.story('Member Permissions')
+    tasks.setupApiIntercepts()
+    loginAsDefaultMember()
+    tasks.visitList()
+    tasks.api.waitForList()
+    tasks.waitForList()
+  })
+
+  describe('CREATE - Member can create tasks', () => {
+    it('MEMBER_TASK_CREATE_001: should create task successfully', () => {
+      const taskTitle = `Member Task ${Date.now()}`
+      const taskDescription = 'Task created by Member for testing'
+
+      // Click create button
+      tasks.clickAdd()
+
+      // Wait for form
+      tasks.waitForForm()
+
+      // Fill form
+      tasks.fillTextField('title', taskTitle)
+      tasks.fillTextarea('description', taskDescription)
+      tasks.submitForm()
+
+      // Wait for API response
+      tasks.api.waitForCreate()
+
+      // Validate task appears in list
+      cy.url().should('include', `/dashboard/${tasks.entitySlug}`)
+      tasks.assertTaskInList(taskTitle)
+      createdTaskTitles.push(taskTitle)
+
+      cy.log('✅ Member created task successfully')
+    })
+  })
+
+  describe('READ - Member can read tasks', () => {
+    it('MEMBER_TASK_READ_001: should view all tasks', () => {
+      // Validate list is loaded
+      tasks.assertTableVisible()
+
+      cy.log('✅ Member can view task list')
+    })
+
+    it('MEMBER_TASK_READ_002: should view task details', () => {
+      // Create a task first
+      const taskTitle = `Member Read Test ${Date.now()}`
+
+      tasks.clickAdd()
+      tasks.waitForForm()
+      tasks.fillTextField('title', taskTitle)
+      tasks.fillTextarea('description', 'Test description')
+      tasks.submitForm()
+      tasks.api.waitForCreate()
+      createdTaskTitles.push(taskTitle)
+
+      // Navigate back to list
+      tasks.visitList()
+      tasks.waitForList()
+
+      // Click on task to view details (rows use onClick, not <a> tag)
+      tasks.clickRowByText(taskTitle)
+
+      // Should show task details
+      cy.url().should('match', new RegExp(`/dashboard/${tasks.entitySlug}/[a-z0-9-]+`))
+      cy.contains(taskTitle).should('be.visible')
+
+      cy.log('✅ Member can view task details')
+    })
+  })
+
+  describe('UPDATE - Member can update tasks', () => {
+    it('MEMBER_TASK_UPDATE_001: should edit task title', () => {
+      const originalTitle = `Member Edit Test ${Date.now()}`
+      const updatedTitle = `${originalTitle} - Updated`
+
+      // Create task
+      tasks.clickAdd()
+      tasks.waitForForm()
+      tasks.fillTextField('title', originalTitle)
+      tasks.fillTextarea('description', 'Edit test')
+      tasks.submitForm()
+      tasks.api.waitForCreate()
+      createdTaskTitles.push(originalTitle)
+      createdTaskTitles.push(updatedTitle)
+
+      // Navigate back to list
+      tasks.visitList()
+      tasks.waitForList()
+
+      // Wait for task to appear
+      tasks.assertTaskInList(originalTitle)
+
+      // Look for edit button and click it
+      cy.get('body').then($body => {
+        // Use POM selector for edit actions (dynamic slug)
+        if ($body.find(tasks.selectors.rowActionEditGeneric).length > 0) {
+          cy.get(tasks.selectors.rowActionEditGeneric).first().click()
+
+          // Wait for form
+          tasks.waitForForm()
+
+          // Update title
+          tasks.fillTextField('title', updatedTitle)
+          tasks.submitForm()
+          tasks.api.waitForUpdate()
+
+          // Validate updated task appears
+          cy.url().should('include', `/dashboard/${tasks.entitySlug}`)
+          tasks.assertTaskInList(updatedTitle)
+
+          cy.log('✅ Member edited task successfully')
+        } else {
+          cy.log('⚠️ No edit button found')
+        }
+      })
+    })
+  })
+
+  describe('DELETE - Member CANNOT delete tasks (no permission)', () => {
+    it('MEMBER_TASK_DELETE_001: delete button should be hidden', () => {
+      // Check if there are tasks
+      cy.get('body').then($body => {
+        if ($body.find(tasks.selectors.rowGeneric).length > 0) {
+          // Click first task to view details (rows use onClick, not <a> tag)
+          cy.get(tasks.selectors.rowGeneric).first().click()
+
+          // Wait for detail page
+          tasks.waitForDetail()
+
+          // Delete button should NOT exist for Member role
+          // EntityDetailHeader uses tasks-delete-btn selector
+          cy.get(tasks.selectors.deleteButton).should('not.exist')
+
+          cy.log('✅ Delete button correctly hidden for Member')
+        } else {
+          cy.log('⚠️ No tasks available to check delete permission')
+        }
+      })
+    })
+  })
+
+  after(() => {
+    // Cleanup: Note created tasks
+    if (createdTaskTitles.length > 0) {
+      cy.log(`🧹 Cleaning up ${createdTaskTitles.length} test tasks...`)
+    }
+  })
+})